Google and BSI work on secure cloud solutions for the public sector

Google and the German Federal Office for Information Security (BSI) have concluded a strategic cooperation agreement with the aim of promoting the development of "secure and sovereign cloud solutions for federal, state and local authorities". This was announced by the internet giant and the authority on Thursday. Both sides want to place a particular focus on "guaranteeing data sovereignty". The solutions developed are to be "specially tailored to the requirements of the public sector", comply with "German and European data protection regulations" and offer the highest standards of IT security.

According to Google, the cooperation covers the US company's entire cloud portfolio, including AI applications such as the Gemini chatbot and associated support services. A newly established cooperation forum is at the heart of the collaboration. This committee is headed by the new BSI Vice President Thomas Caspers and Wieland Holfelder, Vice President Google Cloud Germany. The forum will serve as a central coordination point and direct point of contact for all matters relating to the collaboration. It will deal with important aspects such as systematic security monitoring with a rapid response to potential security incidents as well as the joint development of technical standards and certifications.

Google wants to proactively inform the BSI about problems

The partners also want to work together on advancing post-quantum cryptography and the use of elliptic curves for encryption. According to Google, these technologies are crucial for the long-term security of sensitive data. This is especially true considering "the challenges posed by future quantum computers". The agreement also includes "regular checks for security vulnerabilities and the provision of important security documentation". Google undertakes to "proactively inform the BSI about security-relevant developments, especially in the event of incidents of particular public interest".

All major US hyperscalers already advertise "sovereign" cloud solutions together with German partners. Google announced the development of such a solution for local companies and authorities together with T-Systems in 2021. Amazon wants to score points with the AWS European Sovereign Cloud, which is to consist of at least three data centers in a separate region at secret locations in Brandenburg. Microsoft is cooperating with SAP and Arvato for the Delos Cloud. Critics complain that the United States continues to secure access to data in the cloud worldwide with the Cloud Act as long as US companies are somehow involved.

(nie)